Related reading
Securing AI Pull Requests: Building a Deterministic AST Audit Harness in GitHub Actions
A step‑by‑step tutorial for building a deterministic AST‑based security scanner that runs in GitHub Actions to catch prototype‑pollution, high‑entropy secrets, and unauthorized network egress in AI‑generated pull requests.
SitePointsitepoint.com19 minTransform and route security logs to Microsoft Sentinel tables using Observability Pipelines
Datadog Observability Pipelines now ships pre‑built Microsoft Sentinel Packs that map logs from Palo Alto, Fortinet, Cisco ASA, Cisco Meraki, and ExtraHop into Sentinel’s CommonSecurityLog or Syslog tables. Packs handle field extraction, severity derivation, and device‑action mapping, letting you filter or drop low‑value events before ingest, validate mappings with Live Capture, and reduce per‑GB…
Datadogdatadoghq.com5 minAnnouncing Project Zenith: The ready-to-code Windows experience on developer-class devices
Microsoft announced Project Zenith, a Windows 11 configuration bundled with high‑end developer PCs (64 GB+ unified memory, ≥250 GB/s bandwidth) that ships with VS Code, Windows Terminal and tuned settings for a distraction‑free coding workspace. It also adds built‑in WSL container support and MXC security, enabling on‑device execution of 30B‑parameter AI models without cloud token costs.
Microsoft Edgewindows.com4 minHN143webaudio fingerprinting on alibaba
Firefox made WebAudio output deterministic in v118, collapsing most variance to three CPU‑dependent buckets (x86 without FMA, x86/x64 with FMA, ARM NEON). Telemetry shows 99.24% of users fall into these buckets; a long tail of 23 distinct values affects <0.1% of users. Ongoing bugs aim to merge the remaining buckets. Alibaba’s fingerprint script was extracted (two SHA‑256 hashes) and shown to be…
Mozilla Automation Teamritter.vg3 minInside ZCode: Silently uploading your Git history to the cloud
ZCode (Zhipu’s AI coding desktop) silently archives your entire workspace—including full .git history, LFS cache, and config—encrypts it with a server‑supplied RSA public key, and uploads the ciphertext directly to Aliyun OSS. The upload runs unconditionally for any logged‑in user, cannot be disabled via UI, and the decryption key lives only on the server, giving Zhipu full read access to your co…
Hacker News front pageferstar.org6 minpostmortemHN336113
